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IN THE CLAIMS: 
Amended claims follow: 

1. (currently amended) A computer program product comprising a computer 
program operable to control a reporting computer to report occurrence of an event to a 
receiving computer, said computer program comprising: 

report generating logic operable to generate report data identifying said reporting 
computer and said event; 

data retrieving logic operable to fetch requested data from said receiving 
computer to said reporting computer upon a request of said reporting computer; and 

report sending logic operable to send said report data from said reporting 
computer to said receiving computer during said fetch of said requested data; 

wherein said data retrieving logic and said report sending logic use an internet 
URL to specify said requested data to said receiving computer, said internet URL 
specifying said requested data also containing said report data to be sent to said receiving 
computer. 

2. (original) A computer program product as claimed in claim 1, wherein said 
event is detection of a computer file containing an unwanted computer program, 

3. (original) A computer program product as claimed in claim 2, wherein said 
unwanted computer program is a computer virus. 

4. (original) A computer program product as claimed in claim 1 ? wherein said 
requested data is a description of said event. 

5. (original) A computer program product as claimed in claim 1, wherein said 
event is detection of a computer file containing a computer virus and said requested data 
is a description of said computer virus. 
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6. (original) A computer program product as claimed in claim 1, wherein said 
event is detection of a computer file containing a computer virus and said requested data 
is an updated set of computer virus detecting data for use in detecting computer viruses. 

7. (cancelled) 

8. (previously presented) A computer program product as claimed in claim 1, 
wherein said reporting computer collates report data specifying one or more events that is 
sent together from said reporting computer to said receiving computer during said fetch 
of said requested data, 

9. (original) A computer program product as claimed in claim 1, wherein said 
report data is encrypted by said reporting computer and decrypted by said receiving 
computer. 

1 0. (original) A computer program product as claimed in claim 1, wherein said 
reporting computer and said receiving computer communicate via an internet link. 

1 1 . (original) A computer program product as claimed in claim 1, wherein said 
report data includes one or more of: 

a MAC address identifying a network card of said reporting computer; 
a date of said event; 
a time of said event; 

an identifier of a computer program used by said reporting computer to detect said 

event; 

an identifier of a version of a computer program used by said reporting computer 
to detect said event; 

an identifier of a set of event detecting data used by a computer program used by 
said reporting computer to detect said event; 

an identifier of an event type detected by said reporting computer; 

an action taken by said reporting computer upon detection of said event; and 
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a checksum of a file that triggered said event. 

12. (currently amended) A computer program product comprising a computer 
program operable to control a receiving computer to receive a report of occurrence of an 
event from a reporting computer, said computer program comprising: 

data request receiving logic operable to receive a request for requested data from 
said reporting computer; 

data providing logic operable to provide said requested data to said reporting 
computer; and 

report receiving logic operable to receive report data identifying said reporting 
computer and said event from said reporting computer during providing of said requested 
data to said reporting computer; 

wherein said data retrieving logic and said report sending logic use an internet 
URL to specify said requested data to said receiving computer, said internet URL 
specifying said requested data also containing said report data to be sent to said receiving 
computer. 

13. (original) A computer program product as claimed in claim 12, wherein said 
event is detection of a computer file containing an unwanted computer program. 

14. (original) A computer program product as claimed in claim 13, wherein said 
unwanted computer program is a computer virus. 

15. (original) A computer program product as claimed in claim 12, wherein said 
requested data is a description of said event. 

16. (original) A computer program product as claimed in claim 12, wherein said 
event is detection of a computer file containing a computer virus and said requested data 
is a description of said computer virus, 
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17. (original) A computer program product as claimed in claim 12, wherein said 
event is detection of a computer file containing a computer virus and said requested data 
is an updated set of computer virus detecting data for use in detecting computer viruses, 

18. (cancelled) 

19. (previously presented) A computer program product as claimed in claim 12, 
wherein said report data specifies one or more events and is sent together from said 
reporting computer to said receiving computer during providing of said requested data. 

20. (original) A computer program product as claimed in claim 12, wherein said 
report data is encrypted by said reporting computer and decrypted by said receiving 
computer. 

21 . (original) A computer program product as claimed in claim 12, wherein said 
reporting computer and said receiving computer communicate via an internet link. 

22. (original) A computer program product as claimed in claim 12, wherein said 
report data includes one or more of: 

a MAC address identifying a network card of said reporting computer; 
a date of said event; 
a time of said event; 

an identifier of a computer program used by said reporting computer to detect said 

event; 

an identifier of a version of a computer program used by said reporting computer 
to detect said event; 

an identifier of a set of event detecting data used by a computer program used by 
said reporting computer to detect said event; 

an identifier of an event type detected by said reporting computer; and 

an action taken by said reporting computer upon detection of said event; and 

a checksum of a file that triggered said event. 
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23 . (currently amended) A method of controlling a reporting computer to report 
occurrence of an event to a receiving computer, said method comprising the steps of: 

generating report data identifying said reporting computer and said event; 

fetching requested data from said receiving computer to said reporting computer 
upon a request of said reporting computer; and 

sending said report data from said reporting computer to said receiving computer 
during fetching of said requested data; 

wherein an internet URL is used to specify said requested data to said receiving 
computer, said internet UR L specifying said requested data also containing said report 
data to be sent to said receiving computer. 

24. (original) A method as claimed in claim 23> wherein said event is detection of 
a computer file containing an unwanted computer program. 

25. (original) A method as claimed in claim 24, wherein said unwanted computer 
program is a computer virus. 

26. (original) A method as claimed in claim 23 > wherein said requested data is a 
description of said event. 

27. (original) A method as claimed in claim 23, wherein said event is detection of 
a computer file containing a computer virus and said requested data is a description of 
said computer virus. 

28. (original) A method as claimed in claim 23, wherein said event is detection of 
a computer file containing a computer virus and said requested data is an updated set of 
computer virus detecting data for use in detecting computer viruses. 

29. (cancelled) 
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30. (previously presented) A method as claimed in claim 23 s wherein said 
reporting computer collates report data specifying one or more events that is sent together 
from said reporting computer to said receiving computer during fetching of said 
requested data. 

3 1 . (original) A method as claimed in claim 23, wherein said report data is 
encrypted by said reporting computer and decrypted by said receiving computer. 

32. (original) A method as claimed in claim 23, wherein said reporting computer 
and said receiving computer communicate via an internet link. 

33. (original) A method as claimed in claim 23, wherein said report data includes 
one or more of: 

a MAC address identifying a network card of said reporting computer; 
a date of said event; 
a time of said event; 

an identifier of a computer program used by said reporting computer to detect said 

event; 

an identifier of a version of a computer program used by said reporting computer 
to detect said event; 

an identifier of a set of event detecting data used by a computer program used by 
said reporting computer to detect said event; 

an identifier of an event type detected by said reporting computer; 

an action taken by said reporting computer upon detection of said event; and 

a checksum of a file that triggered said event. 

34. (currently amended) A method of controlling a receiving computer to receive 
a report of occurrence of an event from a reporting computer, said method comprising the 
steps of: 

receiving a request for requested data from said reporting computer; 
providing said requested data to said reporting computer; and 
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receiving report data identifying said reporting computer and said event from said 
reporting computer during providing of said requested data to said reporting computer; 

wherein an internet URL is used to specify said requested data to said receiving 
computer, said internet URL specifying said requested data also containing said report 
data to be sent to said receiving computer. 

35. (original) A method as claimed in claim 34, wherein said event is detection of 
a computer file containing an unwanted computer program. 

36. (original) A method as claimed in claim 35, wherein said unwanted computer 
program is a computer virus, 

37. (original) A method as claimed in claim 34, wherein said requested data is a 
description of said event. 

38. (original) A method as claimed in claim 34, wherein said event is detection of 
a computer file containing a computer virus and said requested data is a description of 
said computer virus. 

39. (original) A method as claimed in claim 34, wherein said event is detection of 
a computer file containing a computer virus and said requested data is an updated set of 
computer virus detecting data for use in detecting computer viruses. 

40. (cancelled) 

41. (previously presented) A method as claimed in claim 34, wherein said report 
data specifies one or more events and is sent together from said reporting computer to 
said receiving computer during providing of said requested data. 

42. (original) A method as claimed in claim 34, wherein said report data is 
encrypted by said reporting computer and decrypted by said receiving computer. 
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43. (original) A method as claimed in claim 34, wherein said reporting computer 
and said receiving computer communicate via an internet link. 

44. (original) A method as claimed in claim 34, wherein said report data includes 
one or more of: 

a MAC address identifying a network card of said reporting computer; 
a date of said event; 
a time of said event; 

an identifier of a computer program used by said reporting computer to detect said 

event; 

an identifier of a version of a computer program used by said reporting computer 
to detect said event; 

an identifier of a set of event detecting data used by a computer program used by 
said reporting computer to detect said event; 

an identifier of an event type detected by said reporting computer; and 

an action taken by said reporting computer upon detection of said event; and 

a checksum of a file that triggered said event, 

45. (currently amended) A reporting computer operable to report occurrence of an 
event to a receiving computer, said reporting computer comprising; 

a report generator operable to generate report data identifying said reporting 
computer and said event; 

a data retriever operable to fetch requested data from said receiving computer to 
said reporting computer upon a request of said reporting computer; and 

a report sender operable to send said report data from said reporting computer to 
said receiving computer during said fetch of said requested data; 

wherein an internet URL is used to specify said requested data to said receiving 
computer, said internet URL specifying said requested data also containing said report 
data to be sent to said receiving computer. 
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46. (original) A reporting computer as claimed in claim 45, wherein said event is 
detection of a computer file containing an unwanted computer program. 

47. (original) A reporting computer as claimed in claim 46, wherein said 
unwanted computer program is a computer virus. 

48. (original) A reporting computer as claimed in claim 45, wherein said 
requested data is a description of said event 

49. (original) A reporting computer as claimed in claim 45, wherein said event is 
detection of a computer file containing a computer virus and said requested data is a 
description of said computer virus. 

50. (original) A reporting computer as claimed in claim 45, wherein said event is 
detection of a computer file containing a computer virus and said requested data is an 
updated set of computer virus detecting data for use in detecting computer viruses. 

51. (cancelled) 

52. (previously presented) A reporting computer as claimed in claim 45, wherein 
said reporting computer collates report data specifying one or more events that is sent 
together from said reporting computer to said receiving computer during said fetch of 
said requested data. 

53. (original) A reporting computer as claimed in claim 45, wherein said report 
data is encrypted by said reporting computer and decrypted by said teceiving computer, 

54. (original) A reporting computer as claimed in claim 45, wherein said reporting 
computer and said receiving computer communicate via an internet link. 
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55. (original) A reporting computer as claimed in claim 45, wherein said report 
data includes one or more of: 

a MAC address identifying a network card of said reporting computer; 
a date of said event; 
a time of said event; 

an identifier of a computer program used by said reporting computer to detect said 

event; 

an identifier of a version of a computer program used by said reporting computer 
to detect said event; 

an identifier of a set of event detecting data used by a computer program used by 
said reporting computer to detect said event; 

an identifier of an event type detected by said reporting computer; 

an action taken by said reporting computer upon detection of said event; and 

a checksum of a file that triggered said event, 

56. (currently amended) A receiving computer operable to receive a report of 
occurrence of an event from a reporting computer, said receiving computer comprising: 

a data request receiver operable to receive a request for requested data from said 
reporting computer; 

a data provider operable to provide said requested data to said reporting computer; 

and 

a report receiver operable to receive report data identifying said reporting 
computer and said event from said reporting computer during providing of said requested 
data to said reporting computer; 

wherein an internet URL is used to specify said requested data to said receiving 
computer, said internet URL specifying said requested data also containing said report 
data to be sent to said receiving compxtter. 

57. (original) A receiving computer as claimed in claim 56, wherein said event is 
detection of a computer file containing an unwanted computer program. 
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58. (original) A receiving computer as claimed in claim 57, wherein said 
unwanted computer program is a computer virus. 

59. (original) A receiving computer as claimed in claim 56, wherein said 
requested data is a description of said event. 

60. (original) A receiving computer as claimed in claim 56, wherein said event is 
detection of a computer file containing a computer virus and said requested data is a 
description of said computer virus. 

61. (original) A receiving computer as claimed in claim 56, wherein said event is 
detection of a computer file containing a computer virus and said requested data is an 
updated set of computer virus detecting data for use in detecting computer viruses, 

62. (cancelled) 

63. (previously presented) A receiving computer as claimed in claim 56, wherein 
said report data specifies one or more events and is sent together from said reporting 
computer to said receiving computer during providing of said requested data. 

64. (original) A receiving computer as claimed in claim 56, wherein said report 
data is encrypted by said reporting computer and decrypted by said receiving computer. 

65. (original) A receiving computer as claimed in claim 56, wherein said reporting 
computer and said receiving computer communicate via an internet link, 

66. (original) A receiving computer as claimed in claim 56, wherein said report 
data includes one or more of: 

a MAC address identifying a network card of said reporting computer; 
a date of said event] 
a time of said event; 
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an identifier of a computer program used by said reporting computer to detect said 

event; 

an identifier of a version of a computer program used by said reporting computer 
to detect said event; 

an identifier of a set of event detecting data used by a computer program used by 
said reporting computer to detect said event; 

an identifier of an event type detected by said reporting computer; and 

an action taken by said reporting computer upon detection of said event; and 

a checksum of a file that triggered said event. 

67. (New) A computer program product as claimed in claim 1 3 wherein said 
report data includes: 

a MAC address identifying a network card of said reporting computer; 
a date of said event; 
a time of said event; 

an identifier of a computer program used by said reporting computer to detect said 

event; 

an identifier of a version of a computer program used by said reporting computer 
to detect said event; 

an identifier of a set of event detecting data used by a computer program used by 
said reporting computer to detect said event; 

an identifier of an event type detected by said reporting computer, 

an action taken by said reporting computer upon detection of said event; and 

a checksum of a file that triggered said event. 

68. (New) A computer program product as claimed in claim 1 5 wherein said 
internet URL includes a name of a script running on said receiving computer and 
encrypted report data. 

69. (New) A computer program product as claimed in claim 68, wherein said 
script decrypts said encrypted report data. 
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70. (New) A computer program product as claimed in claim 1 , wherein said 
report data includes an identifier of a driver triggeied during said event. 

71 . (New) A computer program product as claimed in claim 70, wherein said 
identifier of said driver is mapped to an identity of a virus that triggered said event. 

72. (New) A computer program product as claimed in claim 1, wherein said 
URL is not displayed on said reporting computer. 

73 . (New) A computer program product as claimed in claim 72, wherein said 
URL is in the form of a hypertext link that is associated with a description of said event. 

74. (New) A computer program product as claimed in claim 73 , wherein 
selection of said hypertext link results in a URL request being passed to said receiving 
computer. 
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